Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
File: 9SHhdPhPcWWWHUG2jqcmLigzfWk.mft (raw, json)
Hash identifier: RsAnZLw5eldVyXTpnfnEkF3b/cceZqGByok4NNkF6/Q=
Subject key identifier: F7:E6:24:5B:35:12:9C:4B:46:1C:5A:6E:86:8B:AC:E3:1B:14:06:73
Authority key identifier: F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
Certificate issuer: /CN=f521e174f84f7165961d41b68ea7262e28337d69
Certificate serial: 019D2772152322E24C76F887D6EFCD857051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
Manifest number: 0208
Signing time: Thu 26 Mar 2026 00:01:21 +0000
Manifest this update: Thu 26 Mar 2026 00:01:21 +0000
Manifest next update: Fri 27 Mar 2026 00:01:21 +0000
Files and hashes: 1: 1-rxopH5LJ9Uzi5ISHJXR-dur0jc.roa (hash: aHfsmVZKRy+7AFPaygX163J+5qjXxNU2emyKoCQGtN0=)
2: 9SHhdPhPcWWWHUG2jqcmLigzfWk.crl (hash: b2J79+r6tZrq899JRuipj95f03S/vGvzTzWXGmruwl4=)
3: F_pPHJDcrHyVOVWzvhakia7DJiQ.roa (hash: tFJBSOLCH7tZWWFthieckptanNdtDSMnw7UCYwe6+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:15:23:22:e2:4c:76:f8:87:d6:ef:cd:85:70:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f521e174f84f7165961d41b68ea7262e28337d69
Validity
Not Before: Mar 26 00:01:21 2026 GMT
Not After : Mar 27 00:01:21 2026 GMT
Subject: CN=f7e6245b35129c4b461c5a6e868bace31b140673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dd:e2:15:62:c0:11:04:83:d1:8c:2b:18:a7:
07:4b:d6:0a:c0:28:23:ef:13:28:67:05:6b:ea:65:
a7:71:6e:7d:38:ce:ef:3a:d2:f5:52:7d:b4:03:d0:
2d:14:01:a1:bb:f4:b0:0e:85:e0:48:3d:22:7c:7b:
60:12:87:ce:6a:b9:e3:88:e7:5e:06:42:13:ee:33:
31:fa:f1:89:b2:d3:3b:f8:31:7c:d1:7c:1c:ba:5c:
a0:05:63:8a:2d:ef:97:63:2c:06:2b:31:17:f4:47:
ab:43:04:71:5c:54:13:dc:4a:3f:42:c0:1c:23:4c:
24:d8:ce:e4:55:78:9f:5c:5e:c3:97:75:32:a1:c0:
62:37:6f:58:f6:5a:73:cc:7d:aa:24:46:6e:ad:29:
c6:aa:d1:1d:bf:6c:05:61:1c:46:37:7b:99:23:46:
a7:2e:50:4e:1d:9d:e4:7a:8f:eb:aa:77:4d:aa:e6:
b3:f1:66:6b:cd:50:fd:c4:c5:08:e4:11:00:fb:2b:
15:4d:01:fd:70:85:35:5c:f7:be:ed:56:c5:89:46:
73:00:d7:fd:09:43:aa:7e:d8:3e:35:fd:15:56:40:
fc:f0:d9:50:b5:47:c8:7a:48:be:4b:9e:3d:32:4e:
ac:d6:b7:d2:6f:7c:33:dc:c8:e6:e6:f2:d6:63:53:
1d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E6:24:5B:35:12:9C:4B:46:1C:5A:6E:86:8B:AC:E3:1B:14:06:73
X509v3 Authority Key Identifier:
keyid:F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ff:85:05:8a:9e:b4:6b:3c:9d:a9:3a:88:63:40:db:2c:e0:
e5:83:cf:5e:5e:17:0a:3c:3d:a8:e3:a1:aa:52:84:90:24:07:
ab:10:f9:75:0d:84:f6:55:46:88:6f:f6:f7:1c:72:34:ef:05:
31:ce:f8:d4:27:fb:d3:20:8b:53:7b:01:d7:78:f7:bc:84:d3:
8e:27:91:84:47:7a:9f:94:0b:85:4c:2a:3b:dd:48:53:c8:41:
c5:1f:14:7f:32:a0:ad:14:77:92:11:8f:a2:eb:2e:3a:97:e1:
91:e9:40:b7:f9:f3:25:ce:3f:b1:d1:cc:59:46:7b:2b:75:c3:
58:c7:aa:49:d8:36:41:6d:f8:23:79:e4:d6:32:86:7e:ce:a4:
23:b5:c7:97:38:30:20:eb:76:5c:cc:63:d2:2d:76:80:23:4b:
76:a0:cd:4c:c8:f0:1a:6c:7e:35:ee:b2:37:72:c1:bb:4e:35:
c4:30:f8:9e:37:0f:ef:53:6d:8d:7b:fb:40:37:e5:80:69:ae:
6d:95:3b:81:82:ba:53:63:c2:9c:a6:f9:43:f7:bc:30:df:7c:
7e:5b:f8:75:87:c1:6b:ea:22:ee:0e:44:dc:64:9f:fe:5b:eb:
5e:7a:08:d6:d3:9b:30:7f:5b:5e:f2:c8:40:db:90:09:fd:11:
fe:26:ef:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:55 2026 by rpki-client